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BACKGROUND AND SUMMARY OF THE INVENTION 

The invention relates to a method for operating a vehicle 
and to a device for carrying out the method. 



The method according to the invention is based on a method 
in which access authorization is determined in a dialogue between 
a control device, which is fixed in the vehicle, and an 
authorization verification device (BNE) , which is carried by the 
user. The authorization verification device (BNE) is also used 
for enabling the vehicle drive unit to start. 



A method of this type is known from German Patent Document 
DE 36 15 890 A. In that document, the dialogue between the 
control device and the authorization verification device (BNE) 
is carried out in a wireless manner. The authorization 
verification device is, for example, a transponder which receives 
an interrogation signal emitted by the control device and emits 
a response signal with a response code. If the user is 
authorized, the control device recognizes this user because of 
the correct response code and permits or implements the unlocking 
of the vehicles doors. In the case of the known method, it will 
then be easily possible to start the vehicle drive unit . A 
rotary button provided for this purpose is combined with the 
steering wheel lock and can easily be operated. The problem 



arises in this case that, for staring the vehicle drive unit, it 
is sufficient to unlock the vehicle. A vehicle passenger can 
therefore also start the operation of the vehicle drive unit if 
the authorized vehicle user carrying the BNE does not want him 
5 to do so. 

The described problem becomes particularly serious when the 
access authorization is queried in a form known from German 
Patent Document DE 195 16 316 A. There, the question-answer 
dialogue is already carried out when the authorized user 
ICQ approaches the door handle with his hand. If he does this, for 
Q example, not with the intention of opening the vehicle door and 
m does not recognize that the dialogue has nevertheless resulted 
™ s in his identification and the vehicle is unlocked, it will then 
be possible for a third party to enter the vehicle and start the 
lE drive unit without the authorized user's knowledge. 

In addition to the known method, it will in the future also 
be possible to verify the access authorization by individual 
body-related characteristics. An identification is known, for 
example, which takes place by means of finger prints or speech 
20 recognition. Also, in the case of such a physiological 
authorization verification device, in the quasi automatic 
clearing of the vehicle drive unit known from German Patent 
Document DE 36 15 890 A, there is the problem of an undesired or 
unauthorized start of the operation of this unit. 
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It is an object of the invention to provide a method of the 
above-mentioned type in which this problem is eliminated. 

The invention achieves this object by a method for operating 
a vehicle, in which the access authorization is determined in a 
5 dialogue between a control device, which is fixed in the vehicle, 
and an authorization verification device (BNE) , which is carried 
by the user. The authorization verification device (BNE) is also 
used for enabling the vehicle drive unit to start. The 
authorization verification device (BNE) is interrogated for the 
1Q3 purpose of starting the vehicle drive unit independently of the 
O process for establishing access authorization. 

til Because the authorization to start the operation of the 

O vehicle drive unit is now no longer coupled to a mechanical 
l~ ignition key, the problem of a loss of the memory during the 
IS* operation of the vehicle drive unit occurs particularly when an 

electronic memory is provided for the access authorization 

verification. This loss may be unnoticed by the authorized user; 

for example, the memory may be removed unnoticed from the 

vehicle . 

2 0 The same problem occurs when the memory loses its capacity 

to transmit the access authorization code. For example, in the 
event of an electrical defect of the BNE, which occurs during the 
operation of the vehicle drive unit, the BNE becomes ineffective 
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and no longer permits the subsequent start of the operation of 
the vehicle drive unit. This takes place, for example, if the 
drive unit is constructed as an internal -combust ion engine, and 
the engine is stopped for a short time in front of a closed grade 
5 crossing. 

Because the access code must be transmitted for starting the 
vehicle drive unit, this results in a considerable problem for 
the vehicle user. In order to avoid this problem, the query of 
the access code can also take place during and/or after the 
ICO conclusion of the operation of the vehicle drive unit. The query 
□ during the operation makes it possible to rapidly detect the 
iJj loss. The prerequisite is only a corresponding frequency of the 
==0 query. 

*=Z The query after the conclusion of the operation permits at 

l&f least the taking of appropriate measures in order to then be able 
to start the vehicle again. The result of the query of the 
access code during or after the conclusion of the operation of 
the vehicle drive unit may be the emission of a warning signal. 
With respect to the above, it is advantageous to provide in this 
20 case a vehicle- fixed memory for the access code which will then 
be unlocked and can, for example, also be removed from the 
vehicle by the user. 
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This memory is provided in addition to the actual memory for 
the access code. This redundant memory will then be operative. 
It may be constructed as a mechanical part which is inserted in 
the authorization verification device and functionally replaces 

5 the memory for the access code provided there which may be 
defective. The memory can then be inserted alone or together 
with the BNE in an activating part for the start of the operation 
or the operation of the vehicle drive unit. It can also be 
connected with a mechanical key which is then placed in an 
10 ignition lock and permits the start of the operation of the 

^0 vehicle drive unit in the conventional manner. 

w In order to indicate to the vehicle user that the redundant 

^ memory has become effective, the vehicle user can be 
;=f conspicuously informed of the implemented unlocking of the 
1§I vehicle-fixed memory. This clearly reduces the danger of an 
™ accidental leaving of the redundant memory in the vehicle and the 

related possibility of a start of the vehicle by the unauthorized 

user . 



If, in the process, the memory is ejected out of its 
20 receiving device, this special situation is not only clearly 
pointed out to the vehicle user but is also caused to pay special 
attention to the locking operation of the vehicle and to 
optionally carry out the locking conventionally, for example, by 
means of a mechanical key which, as a rule, is also present. 
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This eliminates the risk of enabling in an emergency by the 
measures provided for this purpose an unauthorized person to use 
the vehicle. The authorized user is caused to carry out the 
required measures (such as the removal of the redundant memory) 
5 himself. 

The invention will be further explained by means of the 
drawings . 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a frontal view of an activating unit for a 
lf^ vehicle drive unit ; 

M - Figure 2 is a top view of a pertaining authorization 

r\ verification device; and 

Figure 3 is a top view of the authorization verification 
device of Figure 2 supplemented by a constructional unit which 
15 permits the start of the operation of the vehicle drive unit in 
the event of an emergency. 

DETAILED DESCRIPTION OF THE DRAWINGS 

Figure 1 illustrates an activating unit 1 for a vehicle 
drive unit (not shown) by which the operation of the drive unit 
20 can be started. For this purpose, a rotatable part 2 of the unit 
1 is rotated in the direction indicated by arrows 3 . The 
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successively arranged arrows 3 and 4 indicate the succession of 
two rotating movements by which, during the first rotating 
movement, the ignition circuit (not shown) of the vehicle is 
first closed in the conventional manner and, as a result of a 
5 further rotation (arrow 4), the starter circuit is also closed 
and the operation of a starter, which is also not shown, is 
started. As a result, the drive unit, here assumed to be an 
internal -combustion engine, can be started. 

It is important here that for starting in the normal 
ICS situation, that is, when the existing components are operating 
□ properly, the starting takes place without inserting a 
conventional ignition key in the activating unit 1. 

!=: In order to check the authorization for starting the 

l *Z operation of the drive unit, an authorization verification device 

15? 5 is provided. This device 5 contains a memory (not shown) for 
an access authorization code, and, in addition, is constructed 
in the conventional manner as a remote control signal generator. 
It has push buttons 6 and 7 for the remote unlocking of the 
central locking system (6) or of the trunk (7) , as well as an 

2 0 additional push button 8 for emitting a remote control signal for 
locking the doors and the trunk of the vehicle. When the push 
button 6 or 7 is activated, the memory for the access 
authorization code is read out and emits in a known manner the 
authorization verification code - which also changes in a known 
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manner with each activation corresponding to a defined algorithm 
and therefore ensures a protection against monitoring. The code 
is received by a control unit provided in the vehicle. If the 
code corresponds to the expected code, the corresponding remote 
5 control command is implemented. 

It is also provided that a previously closed vehicle can be 
opened without the emission of a remote control signal . As known 
per se from German Patent Document DE 35 36 377 A, for this 
purpose, a dialogue is triggered between the control unit and the 
ICS device 5 when a door handle is operated and, if the expected code 
O is emitted by the device 5, the vehicle is unlocked and access 
W is permitted. 

^ For starting the operation of the drive unit, by means of 

^ the rotation of part 2 in the direction of the arrows 3 and 4, 
15f an interrogation signal is also emitted which is received by the 
device 5. As described above, in the case of the quest ion-and- 
answer dialogue for the access, the interrogation signal is 
answered by the emission of the access authorization code from 
device 5. The control unit receives this code and, if it 
2 0 corresponds to the expected code, enables the ignition current 
and starter current circuit. 

As a result, it is possible to start the vehicle without 
using a conventional mechanical ignition key. On the other hand, 
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by querying the access authorization code before the start of the 
operation of the drive unit, it is ensured that the unit 5 is 
situated inside the vehicle. This ensures that the user who 
accessed the vehicle in an authorized manner is now most probably 
5 sitting inside the vehicle; that is, the start of the operation 
of the vehicle drive unit most probably is initiated by him or 
at least with his approval . 

For the event wherein the unit 5 is removed from the vehicle 
or becomes inoperative after the drive unit has been started, 
ICQ an additional measure is provided. This measure first consists 
D of querying the authorization code at defined points in time. 
^ This may take place when the drive unit is switched-of f . 
^ However, it may also occur when the drive unit is restarted 
H without a previous opening and closing of a vehicle door, or also 
l$r at regular time intervals during the operation of the drive unit, 
jrf For this purpose, the access authorization code is always queried 
by the control unit and, if the unit 5 is disposed inside the 
vehicle and is operative, the verification of the authorization 
and of the operability of the unit 5 is supplied by the emission 
20 of the access authorization code. 

In the assumed fault cases, the access authorization code 
will no longer be emitted upon the query. In order to even then 
still ensure the proper operation of the vehicle and permit the 
restarting of the drive unit, an additional memory 9 is provided 
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inside the device 1, which memory 9 also contains the access 
authorization code and which is locked inside the device 1. In 
the event of the described emergency, the locking (not shown) is 
eliminated. The memory 9 can therefore be removed from the 
device 1 . 

The memory 9 forms a constructional unit with a mechanical 
key 10 which can be fitted into the unit 5. This is illustrated 
in Figure 3. In this case, the memory 9 replaces the memory 
provided in the unit 5. This memory 9 supplies the access 
authorization code which is emitted by the unit 5, either by the 
operation of the push buttons 6 or 7 or upon the interrogation 
signal of the control unit . 

If the power source (not shown) provided in the unit 5 is 
spent, a remote control signal cannot be emitted. Thus, a 
vehicle door can only be unlocked mechanically. This takes place 
in that the key 10 is pushed into a corresponding receiving 
device of a vehicle door lock. 

Likewise, it is possible to start the drive unit in this 
case. For this purpose, the unit consisting of parts 9 and 10 
is fitted into the device 5. Like a conventional ignition key, 
the key 10 is then used for permitting the starting of the 
operation of the drive unit by rotating the rotatable part 2 . 
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The opening and the starting of the vehicle can therefore take 
place conventionally at any time. 
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